Generate Documentation and Standard Operating Procedures. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   You are documenting a process for 'Log Collection from a New Source'. The process has a decision point: if the log source is a cloud service, use the API; if it is an on-premises server, use a forwarder. The documentation must be clear for a junior analyst. What is the best way to present this decision point?

   • AWrite the procedure for the cloud API method only, and add a note that on-premises is handled by another team.
   • BUse a table with columns for 'Source Type', 'Method', and 'Steps', and include a row for each source type.
   • CWrite a single paragraph describing both methods and note that the analyst should choose the appropriate one.
   • DProvide two separate procedures in the same document, one for cloud and one for on-premises, and let the analyst figure out which to use.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   Your team maintains a set of incident response SOPs. A recent post-incident review found that two analysts followed different versions of the same procedure, leading to inconsistent actions. The SOPs are stored in a shared network drive with filenames like 'IR_SOP_final_v3.docx'. What is the most effective way to address this version control problem?

   • ARename the files with the date of the last edit, such as 'IR_SOP_2024-05-01.docx', so analysts can easily identify the newest version.
   • BCreate a single 'Master' document that contains all versions, with each version on a separate page, and instruct analysts to use the last page.
   • CStore the SOPs in a version-controlled repository with a clear naming convention, and require analysts to check out the current version before use.
   • DEmail the latest version to all analysts each time it changes, and ask them to replace their local copy.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   In process documentation, what is the purpose of explicitly noting decision points?

   • ATo describe the tools used in the process.
   • BTo list the people responsible for each step.
   • CTo specify the expected time for each step.
   • DTo identify where the process can branch based on conditions.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   Your security team is creating a new set of SOPs for a multi-tenant environment. The SOPs will be used by internal analysts, external contractors, and customers who have limited access to your systems. You need to establish documentation standards that ensure consistency and clarity across all these audiences. What is the most important consideration when defining these standards?

   • AUse a single, uniform template for all SOPs, regardless of the audience, to ensure consistency.
   • BUse the most technical level of detail for all SOPs, since the internal analysts are the primary users.
   • CDefine a core template with common sections, and allow for audience-specific appendices or sections that provide the appropriate level of detail.
   • DWrite separate SOPs for each audience, with no shared template, to fully tailor the content.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   When writing documentation for a technical audience of security analysts, which approach is most appropriate?

   • AUse vague terms to avoid confusion.
   • BUse industry-standard technical terminology and assume familiarity with security concepts.
   • CAvoid all technical terms and use only plain language.
   • DInclude detailed explanations of basic security concepts.
   Reveal Solution Discussion Select an answer first